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Overview 1 


Application of the DAA Principles 
of Transparency and Control to Data 
Used Across Devices 


OVERVIEW 


This guidance explains how the existing Digital Advertising Alliance 
(“DAA”) Self-Regulatory Principles for Online Behavioral Advertising 
(“OBA Principles”) and Multi-Site Data (“MSD Principles”), and 

the Application of the Self-Regulatory Principles to the Mobile 
Environment (“Mobile Guidance”) (collectively, the “Principles”) apply 
to the practice of using Multi-Site Data and Cross-App Data collected 
from a particular browser or device for use on a different computer 


or device. 


The OBA Principles set forth guidance for when data is collected and 
used to predict user preferences or interests to deliver advertising to that 


specific computer or device on which such data was collected.' 


Subsequent to the adoption of the OBA Principles, the DAA adopted 
the MSD Principles in November of 2011 to extend the choice 
provided for OBA beyond advertising to all uses of Multi-Site Data 


with enumerated purpose limitations. The MSD Principles are built off 





! See definition of Online Behavioral Advertising, Self-Regulatory Principles for Online 
Behavioral Advertising at p. 10(G). 


2 Overview 


of the OBA Principles and by extension also limit the corresponding 
choice to consumers that was extended to Multi-Site Data to data 
used on the specific computer or device on which such data was 


collected.” 


As the adoption and use of devices has exploded in recent years, so 
have the practices and benefits to consumers of integrating and using 
data collected across devices.” This guidance is intended to clarify 
how the Transparency and Consumer Control principles apply to 
the use of Multi-Site Data and Cross-App Data across devices. The 
limitations and restrictions set forth in this document are within the 


scope of the Digital Advertising Alliance accountability programs. 


? See Multi-Site Principles at p. 1. In 2013, DAA issued guidance on the application of the 
Principles to the mobile environment, See Application of Self-Regulatory Principles to the Mobile 
Environment (2013) (“Mobile Guidance”) available at http://www.aboutads.info/ DAA_Mobile_ 
Guidance.pdf. 


> As described in the DAA Principles, the relevant Transparency and Consumer Control 
requirements apply to an entity’s collection or use of Multi-Site Data and/or Cross-App Data, 
whether or not that collection or use occurs on a single device or across multiple devices, and 
also apply to the extent Multi-Site Data and/or Cross-App Data is combined with data that is 
outside the scope of the DAA Principles. 


Transparency 3 


TRANSPARENCY 

In providing Transparency as set forth in the existing Principles, 
entities collecting Multi-Site Data and Cross-App Data from a 
particular browser or device for use on a different computer or device 
should include in the notice on their own Web sites that describes 
their data collection and use practices the fact that data collected from 
a particular browser or device may be used with another computer 

or device that is linked to the browser or device on which such data 
was collected, or transferred to a non-Affiliate for such purposes.“ 
Likewise, the Transparency should include a description of the fact 
that exercising choice through the consumer choice mechanism limits 


such collection and use as set forth in the Control Section.’ 


When data is collected or used on a Web site or through an 
application, consistent with the existing principles, the First Party 
should provide a clear, meaningful, and prominent link to a disclosure 
that either links to the industry developed Web site(s) or choice 
mechanism that provides control consistent with this guidance or that 
individually lists Third Parties engaged in the collection of Multi-Site 
or Cross-App Data through its Web site or application.‘ 





í Consistent with the OBA Principles, MSD Principles, and Mobile Guidance, this notice 
should be provided on a Third Party’s own Web site(s) or accessible from application(s) from or 
through which they collect Cross-App Data (see OBA Principles at p. 12; Mobile Guidance at 

p. 14). This notice should also indicate the Third Party’s collection and use of Precise Location 
Data for use across devices. Consent for the collection and use of Precise Location Data should 
encompass the collection of Precise Location Data from a device for use on another computer or 
device that is linked to the device where Consent is obtained. 

5 Consistent with the existing DAA Principles, Third Parties should provide Enhanced Notice 
with respect to this notice as set forth in the OBA Principles and Mobile Guidance (see OBA 
Principles at p. 13; Mobile Guidance at pp. 14-15). 

6 See OBA Principles at p. 35. Consistent with the existing DAA Principles, a Website does not 
need to include such a link in instances where the Third Party provides Transparency as described 
in OBA Principles II.A.2(a). 


4 Control 


CONTROL 
The choice made by consumers as set forth in the existing Principles 
regarding the collection and use of data for purposes other than those 


set forth in the sections on Purpose Limitations,’ also applies to:* 


e The collection of Multi-Site Data on the browser, or Cross-App 
Data on the device, on which choice is being exercised, for use 
on another computer or device that is linked with the browser or 


device on which the choice is being exercised; 


e The use of Multi-Site Data or Cross-App Data on the browser 
or device on which choice is being exercised when that data was 
collected on another computer or device that is linked with the 


browser or device on which choice is being exercised; and 


e The transfer to a Non-Affilliate of Multi-Site Data and/or Cross- 
App Data collected from the browser or device on which choice 


is being exercised.” 





7 MSD Principles at pp. 1-2 and Mobile Guidance at pp. 30-31. 
$ This control provision does not address choice with regard to the creation of a “graph.” 


? Consistent with the DAA Principles, a Third Party that provides consumers access to a 
mechanism or setting offered by a platform or operating system that provides the ability to 
exercise choice with respect to Cross-App Data in a manner consistent with this guidance 
document satisfies this guidance. (See Mobile Guidance at p. 19). An entity cannot avoid the 
Principles’ Transparency and Consumer Control obligations by transferring data to an Affiliate 
for use by that Affiliate or by using the data on a different browser or device than the browser or 
device on which it was collected. Additionally, choice under this guidance document applies to 
future data collection, use, and transfer for purposes other than those set forth in the sections on 
Purpose Limitations. 


